Digisol DG-GS1512HP Скачать руководство пользователя страница 134

Страница: 134 / 234

DG-GS1512HP User Manual

132

Method

Support following authentication method order
combinations.

•

These orders only available on MAC-Based authentication
and WEB-Based authentication. 802.1x only support
Radius method.

•

Local: Use DUT

’

s local database to do authentication.

•

Radius: Use remote RADIUS server to do authentication.

•

Local Radius.

•

Radius Local.

Guest VLAN

Set checkbox to enable/disable guest VLAN.

VLAN Assign

Mode

Support following VLAN assign mode and only apply when
source is RADIUS

•

Disable: Ignore the VLAN authorization result and keep
original VLAN of host.

•

Reject: If get VLAN authorized information, just use it.
However, if there is no VLAN authorized information,
reject the host and make it unauthorized.

•

Static: If get VLAN authorized information, just use it. If
there is no VLAN authorized information, keep original
VLAN of host.

4.10.3.2. Port Setting

This page allow user to configure authentication manger port settings

To display the authentication manager Port Setting web page, click

Security >

Authentication Manager > Port Setting.

Содержание DG-GS1512HP

Страница 1: ...S1512HP 8 Port Giga PoE Ethernet WEB Smart Switch with 4 SFP Ports User Manual V1 0 2018 05 31 As our products undergo continuous development the specifications are subject to change without prior not...

Страница 2: ...possible that information in this document is not up to date Please check with your local distributors for latest information No part of this document can be copied or reproduced in any form without...

Страница 3: ...Installation 13 2 1 Mounting the Switch 13 2 1 1 Placement Tips 13 2 1 2 Rack Mounting 15 3 Getting Started 17 3 1 Power 17 3 1 1 Connecting to Power 17 3 1 2 Connecting to the Network 18 3 1 3 Power...

Страница 4: ...able 33 4 2 Network 34 4 2 1 IP Address 34 4 2 2 System Time 36 4 3 Port 39 4 3 1 Port Setting 39 4 3 2 Error Disable 42 4 3 3 Link Aggregation 44 4 3 3 1 Group 44 4 3 3 2 Port Setting 46 4 3 3 3 LACP...

Страница 5: ...4 5 4 1 MAC Group 69 4 5 4 2 Group Binding 70 4 6 MAC Address Table 72 4 6 1 Dynamic Address 72 4 6 2 Static Address 72 4 6 3 Filtering Address 73 4 7 Spanning Tree 74 4 7 1 Property 74 4 7 2 Port Se...

Страница 6: ...106 4 9 2 2 Querier 110 4 9 2 3 Statistics 111 4 9 4 MVR 113 4 9 4 1 Property 113 4 9 4 2 Port Setting 115 4 9 4 3 Group Address 116 4 10 Security 118 4 10 1 RADIUS 118 4 10 2 Management Access 121 4...

Страница 7: ...Option82 Property 151 4 10 8 4 Option82 Circuit ID 153 4 10 9 IP Source Guard 155 4 10 9 1 Port Setting 155 4 10 9 2 IMPV Binding 157 4 10 9 3 Save Database 159 4 11 ACL 161 4 11 1 MAC ACL 161 4 11 2...

Страница 8: ...4 13 4 Traceroute 186 4 14 Management 187 4 14 1 User Account 187 4 14 2 Firmware 189 4 14 2 1 Upgrade Backup 189 4 14 2 2 Active Image 193 4 14 3 Configuration 194 4 14 3 1 Upgrade Backup 194 4 14 3...

Страница 9: ...DG GS1512HP User Manual 7 4 14 5 1 Statistics 217 4 14 5 2 History 220 4 14 5 3 Event 223 4 14 5 4 Alarm 226...

Страница 10: ...xt Arguments for which you supply values are in italic Square brackets mean optional elements Braces group required choices and vertical bars separate the alternative elements Braces and vertical bars...

Страница 11: ...Digisol DG GS1512HP is a WEB Smart PoE switch with 8 Gigabit PoE ports 4 SFP Ports respectively 1 2 Package contents Before using the product check that the items listed below are included and in good...

Страница 12: ...h rack mountable metal case 1 4 Product Components 1 4 1 Ports The following view applies to DG GS1512HP 1 2 Figure 1 Front View No Name Description 1 10 100 1000Mbps RJ 45 ports 1 12 Designed to conn...

Страница 13: ...ure 2 Rear View No Name Description 1 AC power in Supports AC 100 240V 50 60Hz 1 4 2 LED Indicators The following view applies to DG GS1512HP 3 4 1 2 Figure 3 Front View LED Indicators No Name Descrip...

Страница 14: ...on 3 Port LED LINK ACT bi color LED Off port disconnected or link fail Green on 1000Mbps connected PoE power output on Amber on 10 100Mbps connected Blinking sending or receiving data 4 SFP LED Off p...

Страница 15: ...nt the switch from overheating do not operate it in an area that exceeds an ambient temperature of 122 F 50 C Air Flow Be sure that there is adequate air flow around the switch Mechanical Loading Be s...

Страница 16: ...DG GS1512HP User Manual 14 Figure 4 Desktop Installation...

Страница 17: ...unted on the switch using the screws provided in the kit and have two holes that are used to then screw the switch into the rack An example of one type of these extension brackets is shown in the foll...

Страница 18: ...DG GS1512HP User Manual 16 2 Secure the switch on the equipment rack with the screws provided Figure 6 Rack Installation...

Страница 19: ...ting the web based configuration utility 3 1 Power 3 1 1 Connecting to Power Power down and disconnect the power cord before servicing or wiring a switch Do not disconnect modules or cabling unless th...

Страница 20: ...the other end of the Ethernet cable to one of the numbered Ethernet ports of the switch The LED of the port lights if the device connected is active 3 Repeat Step 1 and Step 2 for each device to conne...

Страница 21: ...can supply power to PDs such as internet phones network cameras wireless access points Connect the switch PoE port directly to the PD port using a network cable When connecting switches capable of su...

Страница 22: ...Be sure to disable any pop up blocker Browser Restrictions If you are using older versions of Internet Explorer you cannot directly use an IPv6 address to access the device You can however use the DN...

Страница 23: ...r computer s IP address must be in the same subnet as the switch For example if the switch is using the factory default IP address your computer s IP address can be in the following range 192 168 1 x...

Страница 24: ...first time that you logged on with the default user ID admin and the default password admin it is recommended that you change your password immediately When the login attempt is successful the System...

Страница 25: ...t click Logout in the top right corner of any page The system logs out of the device When a timeout occurs or you intentionally log out of the system a message appears and the Login page appears with...

Страница 26: ...r the purposes of this manual the user interface is separated into four sections as shown in the following figure Figure 11 User Interface No Name Description 1 Configuration menu Navigate to locate s...

Страница 27: ...ory utilization and other system current information It also allows user to edit some system information To display the Device Information web page click Status System Information Figure 12 Status Sys...

Страница 28: ...ent Time Current system time Loader Version Boot loader image version Loader Date Boot loader image build date Firmware Version Current running firmware image version Firmware Date Current running fir...

Страница 29: ...MONMIB Interfaces and Ethernet like counters display errors on the traffic passing through each port RMON counters provide a total count of different frame types and sizes passing through each port Th...

Страница 30: ...DG GS1512HP User Manual 28 To display the Port Flow Chart web page click Status Port Statistics...

Страница 31: ...29 Figure 15 Status Port Statistics Item Description Port Select one port to show counter statistics MIB Counter Select the MIB counter to show different counter type All All counters Interface Interf...

Страница 32: ...of specified port 4 1 2 2 Error Disabled To display the Error Disabled web page click Status Port Error Disabled Figure 16 Status Port Error Disabled Item Description Select one or more port to opera...

Страница 33: ...Refresh the current page Recover Recover the selected port status 4 1 2 3 Bandwidth Utilization This page allow user to browse ports bandwidth utilization in real time This page will refresh automatic...

Страница 34: ...Link Aggregation web page click Status Link Aggregation Figure 18 Status Link Aggregation Item Description LAG LAG Name Name LAG port description Type The type of the LAG Static The group of ports ass...

Страница 35: ...or auto learned from hardware The Clear button will clear all dynamic entries and Refresh button will retrieve latest MAC address entries and show them on page To display the MAC Address Table web pa...

Страница 36: ...2 Network Use the Network pages to configure settings for the switch network interface and how the switch connects to a remote server to get services 4 2 1 IP Address This section allows you to edit t...

Страница 37: ...DG GS1512HP User Manual 35 Figure 20 Network IP Address...

Страница 38: ...th switch IP address configuration DNS Server 1 Specify the primary user defined IPv4 DNS server configuration DNS Server 2 Specify the secondary user defined IPv4 DNS server configuration Table 3 2 I...

Страница 39: ...DG GS1512HP User Manual 37 SNTP server To display System Time page click Network System Time Figure 21 Network System Time...

Страница 40: ...ddress Input IPv4 address or hostname for NTP server This is enabled when time source is SNTP Server Port Input NTP port for NTP server Default is 123 This is enabled when time source is SNTP Manual T...

Страница 41: ...curring daylight saving time This field available when selecting Recurring mode Non recurring From Specify the starting time of non recurring daylight saving time This field available when selecting N...

Страница 42: ...display Port Setting web page click Port Port Setting Figure 22 Port Port Setting Item Description Port Port Name Type Port media type Description Port Description State Port admin state Enabled Enabl...

Страница 43: ...k Edit button to edit Port Setting menu Figure 23 Port Port Setting Port Setting Item Description Port Selected Port list Description Port media type State Port admin state Enabled Enable the port Dis...

Страница 44: ...ith 1000M ability Duplex Port duplex capabilities Auto Auto duplex with all capabilities Half Auto speed with 10M and 100M ability only Full Auto speed with 10M 100M 1000M ability only Flow Control Po...

Страница 45: ...Multicast Flood reason occur This reason caused by unknown multicast rate exceed unknown multicast storm control rate Unicast Flood Enabled to auto shutdown port when Unicast Flood reason occur This...

Страница 46: ...regation Group Figure 25 Port Link Aggregation Group Item Description Load Balance Algorithm LAG load balance distribution algorithm src dst mac Based on MAC address src dst mac ip Based on MAC addres...

Страница 47: ...Link Aggregation Group menu Figure 26 Port Link Aggregation Group Edit Link Aggregation Group Item Description LAG Selected LAG group ID Name LAG port description Type The type of the LAG Static The g...

Страница 48: ...configurations To display LAG Port Setting web page click Port Link Aggregation Port Setting Figure 27 Port Link Aggregation Port Setting Item Description LAG LAG Port Name Type LAG Port media type De...

Страница 49: ...configuration and link duplex status Flow Control Current LAG port flow control configuration and link flow control status Click Edit to view Edit Port Setting menu Figure 28 Port Link Aggregation Po...

Страница 50: ...o speed with 10M 100M abilities 10M Force speed with 10M ability 100M Force speed with 100M ability 1000M Force speed with 1000M ability Flow Control Port flow control Auto Auto flow control by negoti...

Страница 51: ...ity of LACP This decides the system priority field in LACP PDU Port Port Name Port Priority LACP priority value of the port Timeout The periodic transmissions type of LACP PDUs Long Transmit LACP PDU...

Страница 52: ...st Port Priority Enter the LACP priority value of the port Timeout The periodic transmissions type of LACP PDUs Long Transmit LACP PDU with slow periodic 30s Short Transmit LACPP DU with fast periodic...

Страница 53: ...EE Item Description Port Port Name State Port EEE admin state Enabled EEE is enabled Disabled EEE is disabled Operational Status Port EEE operational status Enabled EEE is operating Disabled EEE is no...

Страница 54: ...is enabled Disabled EEE is disabled 4 3 5 Jumbo Frame This page allow user to configure switch jumbo frame size To display Jumbo Frame web page click Port Jumbo Frame Figure 33 Port Jumbo Frame Item...

Страница 55: ...vices over the existing data connection 4 4 1 Global Setting To display the Global web page click PoE Global Setting Figure 34 PoE Global Setting Item Description Nominal Power Maximum supply power Co...

Страница 56: ...List menu Figure 35 PoE Priority Setting Edit PoE Schedule Edit Item Description Index The serial number of schedule list Schedule Status Schedule Status Checked Schedule status is enabled Unchecked S...

Страница 57: ...er supply priority To display the Priority Setting web page click PoE Priority Setting Figure 36 PoE Priority Setting Item Description L is lower priority H is high priority and C is Critical priority...

Страница 58: ...this port Click Edit to view Power Limit Setting menu Figure 38 PoE Power Setting Power Limit Setting Table Item Description Port List Selected port list Power Limit Enter max supply power value for...

Страница 59: ...uirements that communicate as if they were attached to the same broadcast domain regardless of their physical location A VLAN has the same attributes as a physical local area network LAN but it allows...

Страница 60: ...VLAN entry has a unique name user can edit VLAN name in edit page To display Create VLAN page click VLAN VLAN Create VLAN Figure 40 VLAN VLAN Create VLAN Item Description Available VLAN VLAN has not...

Страница 61: ...1q VLAN Click Edit button to view Edit VLAN Name menu Figure 41 VLAN VLAN Create VLAN Edit VLAN Name Item Description Name Input VLAN name 4 5 1 2 VLAN Configuration This page allow user to configure...

Страница 62: ...rt entry Mode Display the interface VLAN mode of port Membership Select the membership for this port of the specified VLAN ID Forbidden Specify the port is forbidden in the VLAN Excluded Specify the p...

Страница 63: ...3 VLAN VLAN Membership Item Description Port Display the interface of port entry Mode Display the interface VLAN mode of port Administrative VLAN Display the administrative VLAN list of this port Oper...

Страница 64: ...to add membership Select VLANs of right box then move to left box to remove membership Tagging membership may not choose in differ VLAN port mode Select the time source Forbidden Set VLAN as forbidden...

Страница 65: ...ge click VLAN VLAN Port Setting Figure 45 VLAN VLAN Port Setting Item Description Port Display the interface Mode Display the VLAN mode of interface PVID Display the Port based VLAN ID of port Accept...

Страница 66: ...pecification Access Accepts only untagged frames and join an untagged VLAN Trunk An untagged member of one VLAN at most and is a tagged member of zero or more VLANs PVID Specify the port based VLAN ID...

Страница 67: ...per interface settings of voice VLAN To display Property Web page click VLAN Voice VLAN Property Figure 47 VLAN Voice VLAN Property Item Description State Set checkbox to enable or disable voice VLAN...

Страница 68: ...ime if without any packet pass through Port Setting Table Port Display port entry State Display enable disabled status of interface Mode Display voice VLAN mode QoS Policy Display voice VLAN remark wi...

Страница 69: ...ber manually QoS Policy Select port QoS Policy mode Voice Packet QoS attributes are applied to packets with OUIs in the source MAC address All QoS attributes are applied to packets that are classified...

Страница 70: ...description of OUI entry Click Add or Edit button to Add Edit Voice OUI menu Figure 50 VLAN Voice VLAN Voice OUI Add Edit Voice OUI Item Description OUI Input OUI MAC address Can t be edited in edit d...

Страница 71: ...to add or edit groups settings of MAC VLAN To display the MAC page click VLAN MAC VLAN MAC Group Figure 51 VLAN MAC VLAN MAC Group Item Description Group ID Display group ID of entry MAC Address Disp...

Страница 72: ...47 Only available on Add Dialog MAC Address Input mac address for classifying packets Mask Input mask of mac address 4 5 4 2 Group Binding This page allow user to bind MAC VLAN group to each port with...

Страница 73: ...ding Item Description Port Select ports in left box then move to right to binding with MAC group Or select ports in right box then move to left to unbind with MAC group Only interface has hybrid VLAN...

Страница 74: ...the Dynamic Address web page click MAC Address Table Dynamic Address Figure 55 MAC Address Table Dynamic Address Item Description Aging Time The time in seconds that an entry remains in the MAC addres...

Страница 75: ...Specify the VLAN to show or clear MAC entries Port Interface or port number 4 6 3 Filtering Address To display the Filtering Address web page click MAC Address Table Filtering Address Figure 57 MAC Ad...

Страница 76: ...e The Spanning Tree Protocol STP is a network protocol that ensures a loop free topology for any bridged Ethernet local area network 4 7 1 Property To display the Property web page click Spanning Tree...

Страница 77: ...is disabled Flooding Flood the BPDU when STP is disabled Priority Specify the bridge priority The valid range is from 0 to 61440 and the value should be the multiple of 4096 It ensures the probabilit...

Страница 78: ...revision number Its valid rage is from 0 to 65535 Max Hop Specify the number of hops in an MSTP region before the BPDU is discarded The valid range is 1 to 40 Operational Status Bridge Identifier Brid...

Страница 79: ...PDU filter on the specified port BPDU Guard The states of BPDU guard on the specified port Operational Edge The operational edge port status on the specified port Operational Point to Point The operat...

Страница 80: ...n the switch Designated Cost The path cost of the designated port on the switch Protocol Migration Check Restart the Spanning Tree Protocol STP migration process re negotiate with its neighborhood on...

Страница 81: ...he edge mode is enabled for the interface and there are BPDUs received on the interface the loop might be occurred in the short time before the STP state change BPDU Filter The BPDU Filter configurati...

Страница 82: ...tion MSTI Designated port number Priority The bridge priority on the specified MSTI Bridge Identifier The bridge identifier on the specified MSTI Designated Root Bridge The designated root bridge iden...

Страница 83: ...Instance Edit MST Instance Setting Item Description VLAN Select the VLAN list for the specified MSTI Priority Specify the bridge priority on the specified MSTI The valid range is from 0 to 61440 and t...

Страница 84: ...terface ID or the list of interface IDs Path Cost The port path cost on the specified MSTI Priority The port priority on the specified MSTI Port Role The current port role on the specified port The po...

Страница 85: ...to a LAN that is not in the same region Designated Bridge The bridge ID of the designated bridge Designated Port ID The designated port ID on the switch Designated Cost The path cost of the designated...

Страница 86: ...I Priority Specify the STP port priority on the specified MSTI 4 7 5 Statistics To display the STP statistics click STP Statistics Figure 65 Spanning Tree Statistics Item Description Refresh Rate The...

Страница 87: ...U Transmit BPDU Config The counts of the transmitted CONFIG BPDU Transmit BPDU TCN The counts of the transmitted TCN BPDU Transmit BPDU MSTP The counts of the transmitted MSTP BPDU Clear Clear the sta...

Страница 88: ...r the statistics for the selected interfaces 4 8 Discovery Use this section to configure LLDP 4 8 1 LLDP LLDP is a one way protocol there are no request response sequences Information is advertised by...

Страница 89: ...this switch LLDP Handling Select LLDP PDU handling action to be filtered bridging or flooded when LLDP is globally disabled Filtering Deletes the packet Bridging VLAN aware flooding Forwards the pack...

Страница 90: ...elay before a re initialization range 1 10 seconds default 2 Transmit Delay Select the delay after an LLDP frame is sent range 1 8191 seconds default 3 Fast Start Repeat Count Select fast start repeat...

Страница 91: ...cted LLDP TLV Click Edit button to view Edit Port Setting menu Figure 69 Discovery LLDP Port Setting Edit Port Setting Item Description Port Select specified port or all ports to configure LLDP state...

Страница 92: ...TLVs to be carried multiple selection is allowed System Name Port Description System Description System Capability 802 3 MAC PHY 802 3 Link Aggregation 802 3 Maximum Frame Size Management Address 802...

Страница 93: ...on Port Port Name In Use Bytes Total number of bytes of LLDP information in each packet Available Bytes Total number of available bytes left for additional LLDP information in each packet Operational...

Страница 94: ...otal mandatory TLV byte size Status is sent or overloading 802 3 TLVs Total 802 3 TLVs byte size Status is sent or overloading Optional TLVs Total Optional TLV byte size Status is sent or overloading...

Страница 95: ...tion To display LLDP Local Device click Discovery LLDP Local Information Figure 72 Discovery LLDP Local Information Item Descriptio n Chassis ID Subtype Type of chassis ID such as the MAC address Chas...

Страница 96: ...functions of the device such as Bridge WLAN AP or Router Capabilities Enabled Primary enabled functions of the device Port ID Subtype Type of the port identifier that is shown LLDP Status LLDP Tx and...

Страница 97: ...2HP User Manual 95 Figure 73 Discovery LLDP Local Information Detail 4 8 1 5 Neighbor Use the LLDP Neighbor page to view LLDP neighbors information To display LLDP Remote Device click Discovery LLDP N...

Страница 98: ...ted Chassis ID Subtype Type of chassis ID for example MAC address Port ID Subtype Type of the port identifier that is shown Port ID Identifier of port System Name Published name of the switch Time to...

Страница 99: ...Manual 97 Figure 75 LLDP Neighbor Detail Page 4 8 1 6 Statistics The Link Layer Discovery Protocol LLDP Statistics page displays summary and per port information for LLDP frames transmitted and receiv...

Страница 100: ...a particular MAC Service Access Point MSAP has been inserted into tables associated with the remote systems Deletions The number of times the complete set of information advertised by MSAP has been d...

Страница 101: ...on the corresponding port while the LLDP agent is enabled Receive Frame Discard Number of LLDP frames discarded for any reason by the LLDP agent on the corresponding port Receive Frame Error Number of...

Страница 102: ...click Multicast General Property Figure 77 Multicast General Property Item Description Unknown Multicast Action Set the unknown multicast action Flood flood the unknown multicast data Drop drop the u...

Страница 103: ...ress This page allow user to browse all multicast groups that dynamic learned or statically added To display Multicast General Group web page click Multicast General Group Address Figure 78 Multicast...

Страница 104: ...member ports of group Type The type of group Static or Dynamic Life Sec The life time of this dynamic group Click Add or Edit button to view Add or Edit Group Address menu Figure 79 Multicast General...

Страница 105: ...P address Member The member ports of group Available Port Optional port member Selected Port Selected port member 4 9 1 3 Router Port This page allow user to browse all router port information The sta...

Страница 106: ...v6 multicast router VLAN The VLAN ID router entry Member Router Port member include static and learned port member Static Port Static router port member Forbidden Port Forbidden router port member Lif...

Страница 107: ...AN member Selected VLAN Selected VLAN member IP Version IP Version IPv4 ipv4 multicast router IPv6 ipv6 multicast router Type The router port type Static static router port Forbidden forbidden router...

Страница 108: ...re specific VLAN settings of IGMP Snooping To display IGMP Snooping global setting and VLAN Setting web page click Multicast IGMP Snooping Property Figure 82 Multicast IGMP Snooping Property Item Desc...

Страница 109: ...the expected packet loss on a subnet Query Interval The interval of querier to send general query Query Max Response Interval In Membership Query Messages it specifies the maximum allowed time before...

Страница 110: ...nooping VLAN functionality Enable If Checked Enable IGMP Snooping VLAN else is Disabled IGMP Snooping VLAN Router Port Auto Learn Set the enabling status of IGMP Snooping router port learning Enable I...

Страница 111: ...uery Counter The Admin last member query count that Querier switch sends Group Specific Queries when it receives a Leave Group message for a group Last Member Query Interval The Admin last member quer...

Страница 112: ...Setting web page click Multicast IGMP Snooping Querier Figure 84 Multicast IGMP Snooping Querier Item Description VLAN IGMP Snooping querier entry VLAN ID State The IGMP Snooping querier Admin State...

Страница 113: ...lection on the chose VLANs Enabled if checked Enable IGMP Querier else Disable IGMP Querier Version Set the query version of IGMP Querier Election on the chose VLANs IGMPv2 Querier version 2 IGMPv3 Qu...

Страница 114: ...multicast data to CPU Valid The valid igmp snooping process packet Invalid The invalid igmp snooping process packet Other The ICMP protocol is not 2 and is not ipv4 multicast data packet Leave IGMP le...

Страница 115: ...l query packet include querier transmit general query packet Special Group Query IGMP special group query packet include querier transmit special group query packet Source specific Group Query IGMP Sp...

Страница 116: ...AN The MVR VLAN ID Mode Set the MVR mode Compatible compatible mode Dynamic dynamic mode will learn group member on source port Group Start MVR group range start Group Count MVR group continue count Q...

Страница 117: ...MVR port role and immediate leave state setting web page click Multicast MVR Port Setting Figure 88 Multicast MVR Port Setting Item Description Entry Entry of number Port Port Name Role Port Role for...

Страница 118: ...s none Receiver port role is receiver Source port role is source Immediate Leave MVR Port immediate leave Enable if checked is enable immediate leave else disable immediate leave 4 9 4 3 Group Address...

Страница 119: ...AN ID of MVR group Group Address The MVR group IP address Member The member ports of MVR group Type The type of MVR group Static or Dynamic Life Sec The life time of this dynamic MVR group Click Add b...

Страница 120: ...port when MVR mode is compatible it include source port when mode is dynamic Selected Port Selected port member 4 10 Security Use the Security pages to configure settings for the switch security feat...

Страница 121: ...ablish with the server setting which has highest priority If failed it will try to connect to the server with next higher priority Retry RADIUS server retry value If it is fail to connect to server it...

Страница 122: ...DG GS1512HP User Manual 120 Figure 93 Security RADIUS Add Edit RADIUS Server...

Страница 123: ...to establish with the server setting which has highest priority If failed it will try to connect to the server with next higher priority Retry Set RADIUS server retry value If it is fail to connect to...

Страница 124: ...ement Service Figure 94 Security Management Access Management Service Item Description Management Service Management service admin state Telnet Connect CLI through telnet SSH Connect CLI through SSH H...

Страница 125: ...ill freeze after silent time Silent Time After input error password exceeds password retry count the CLI will freeze after silent time 4 10 2 2 Management ACL This page allow user to add or delete man...

Страница 126: ...f ACL under active To display Management ACE page click Security Management Access Management ACE Figure 96 Security Management Access Management ACE Item Description ACL Name Select the ACL name to w...

Страница 127: ...iority Specify the priority of the ACE ACEs with higher sequence are processed first 1 is the highest priority Only available on Add Dialog Service Select the type service of rule All All services HTT...

Страница 128: ...fy IPv4 address ca access IPv6 Specify IPv6 address ca access IPv4 Enter the source IPv4 address value and mask to which will be matched IPv6 Enter the source IPv6 address value and mask to which will...

Страница 129: ...ication MAC Based Use MAC address to do authentication WEB Based Prompt authentication web page for user to do authentication Guest VLAN Set checkbox to enable disable guest VLAN if guest VLAN is enab...

Страница 130: ...on is enabled Disabled MAC Based authentication is disabled Authentication Type WEB Based WEB Based authentication type state Enabled WEB Based authentication is enabled Disabled WEB Based authenticat...

Страница 131: ...MAC Based WEB Based 802 1x MAC Based 802 1x WEB Based MAC Based 802 1x WEB Based 802 1x 802 1x MAC Based WEB Based 802 1x WEB Based MAC Based Method Support following authentication method order comb...

Страница 132: ...p original VLAN of host Reject If get VLAN authorized information just use it However if there is no VLAN authorized information reject the host and make it unauthorized Static If get VLAN authorized...

Страница 133: ...the same access accessibility Web auth cannot be enabled in this mode Single Host In this mode only one host is allowed to be authenticated It is the same as Multi auth mode with max hosts number con...

Страница 134: ...port following VLAN assign mode and only apply when source is RADIUS Disable Ignore the VLAN authorization result and keep original VLAN of host Reject If get VLAN authorized information just use it H...

Страница 135: ...rk accessibility Force Authorized Port is force authorized and all clients have network accessibility Force Unauthorized Port is force unauthorized and all clients have no network accessibility Auto N...

Страница 136: ...s allowed to authenticate again 802 1X Params TX Period Number of seconds that the device waits for a response to an Extensible Authentication Protocol EAP request identity frame from the supplicant c...

Страница 137: ...following authentication port control types Disable Disable authentication function and all clients have network accessibility Force Authorized Port is force authorized and all clients have network a...

Страница 138: ...e the packet is counting on the authorized host only and not all packets on the port Quiet When port is in Locked state after authenticating fail several times the host will be locked in quiet period...

Страница 139: ...eb page click Security Authentication Manger Sessions Figure 102 Security Authentication Manager Sessions Item Description Session ID Session ID is unique of each session Port Port name which the host...

Страница 140: ...st is in the guest VLAN Operational VLAN Shows host operational VLAN ID Operational Session Time In Authorized state it shows total time after authorized Operational Inactived In Authorized state it s...

Страница 141: ...will be perform once learned MAC address over limitation To display Port Security web page click Security Port Security Figure 103 Security Port Security Item Description State Enable Disable the por...

Страница 142: ...xceed the learning limit number Shutdown Shutdown this port when receives a packet whose SMAC is new to system and exceed the learning limit number Click Edit button to view Edit Port Security menu Fi...

Страница 143: ...AC is new to system and exceed the learning limit number 4 10 5 Protected Port This page allow user to configure protected port setting to prevent the selected ports from communication with each other...

Страница 144: ...tected Port menu Figure 106 Security Protected Port Edit Protected Port Item Description Port Selected port list State Port protected admin state Protected Enable protecting function Unprotected Disab...

Страница 145: ...rate calculates by packet based Kbits Sec storm control rate calculates by octet based IFG Select the rate calculates w o preamble IFG 20 bytes Excluded exclude preamble IFG 20 bytes when count ingres...

Страница 146: ...ble the storm control function of Broadcast packet Value of storm control rate Unit pps packet per second range 1 262143 or Kbps Kbits per second range16 1000000 depends on global mode setting Unknown...

Страница 147: ...n when packets exceed storm control rate 4 10 7 DoS A Denial of Service DoS attack is a hacker attempt to make a device unavailable to its users DoS attacks saturate the device with external communica...

Страница 148: ...if the source IP address is equal to the destination IP address UDP Blat Drops the packets if the UDP source port equals to the UDP destination port TCP Blat Drops the packages if the TCP source port...

Страница 149: ...et 1 Drops the TCP fragment packets with offset equals to one Ping Max Size Specify the maximum size of the ICMPv4 ICMPv6 ping packets The valid range is from 0 to 65535 bytes and the default value is...

Страница 150: ...State Enable Disable the DoS protection on the interface 4 10 8 DHCP Snooping Use the DHCP Snooping pages to configure settings of DHCP Snooping 4 10 8 1 Property This page allow user to configure gl...

Страница 151: ...ANs in left box then move to right to enable DHCP Snooping Or select VLANs in right box then move to left to disable DHCP Snooping Port Setting Table Port Display port ID Trust Display enable disabled...

Страница 152: ...led Verify Chaddr Set checkbox to enable or disable chaddr validation of interface All DHCP packets will be checked whether client hardware mac address is same as source mac in Ethernet header if enab...

Страница 153: ...dation Untrusted Port Drop Display how many DHCP server packets that are received by untrusted port dropped Untrusted Port with Option82 Drop Display how many packets dropped by untrusted port with op...

Страница 154: ...Set checkbox to enable user defined remote ID By default remote ID is switch mac in byte order Remote ID Input user defined remote ID Only available when enable user define remote ID Port Setting Tab...

Страница 155: ...e action perform when untrusted port receive DHCP packet has option82 filed Default is drop Keep Keep original option82 content Replace Replace option82 content by switch setting Drop Drop packets wit...

Страница 156: ...Description Port Display port ID of entry VLAN Display associate VLAN of entry Circuit ID Display circuit ID string of entry Click Add button or Edit button to view the Add Edit Option82 Circuit ID m...

Страница 157: ...on Add dialog Circuit ID Input String as circuit ID Packets match port and VLAN will be inserted circuit ID 4 10 9 IP Source Guard Use the IP Source Guard pages to configure settings of IP Source Gua...

Страница 158: ...Binding Entry Display current binding entries of a interface Max Binding Entry Display the number of maximum binding entry of interface Click Edit button to view the Edit Port Setting menu Figure 119...

Страница 159: ...ded Default is un limited on all ports No entry will be bound if limitation reached 4 10 9 2 IMPV Binding This page allow user to add static IP source guard entry and browse all IP source guard entrie...

Страница 160: ...y user input Binding Display binding type of entry Type Type of existing binding entry Static Entry added by user Dynamic Entry learned by DHCP snooping Lease Time Lease time of DHCP Snooping learned...

Страница 161: ...and VLAN ID IP Port VLAN packet must match IP address or subnet Port and VLAN ID MAC Address Input MAC address Only available on IP MAC Port VLAN mode IP Address Input IP address and mask Mask only a...

Страница 162: ...ding entries to remote TFTP server Filename Input filename for backup file Only available when selecting type flash and TFTP Address Type Select the type of TFTP server Hostname TFTP server address is...

Страница 163: ...r the switch ACL features 4 11 1 MAC ACL This page allow user to add or delete ACL rule A rule cannot be deleted if under binding To display MAC ACL page click ACL MAC ACL Figure 123 ACL MAC ACL Item...

Страница 164: ...CL MAC ACE Item Description ACL Name Select the ACL name to which an ACE is being added Sequence Display the sequence of ACE Action Display the action of ACE Source MAC Display the source MAC address...

Страница 165: ...sequence are processed first 1 is the highest priority Only available on Add Dialog Action Select the action after ACE match packet Permit Forward packets that meet the ACE criteria Deny Drop packets...

Страница 166: ...nation MAC address and mask to which will be matched Ethertype Select the type for Ethernet frame type Any All Ethernet frame type is acceptable User Defined Only an Ethernet frame type which users de...

Страница 167: ...ACL IPv4 ACL Item Description ACL Name Input IPv4 ACL name ACL Name Display IPv4 ACL name Rule Display the number ACE rule of ACL Port Display the port list that bind this ACL 4 11 4 IPv4 ACE This pag...

Страница 168: ...estination IP address and mask of ACE Source Port Display single source port or a range of source ports of ACE Only available when protocol is TCP or UDP Destination Port Display single destination po...

Страница 169: ...nu Figure 128 ACL Add Edit ACE Item Description ACL Name Display the ACL name to which an ACE is being added Sequence Specify the sequence of the ACE ACEs with higher sequence are processed first 1 is...

Страница 170: ...l ID to match Enter the protocol ID Source IP Select the type for source IP address Any All source addresses are acceptable User Defined Only a source address or a range of source addresses which user...

Страница 171: ...s that can be configured shared between source and destination ports TCP and UDP protocols each have eight port ranges Destination Port Select the type of protocol for a match Only available when prot...

Страница 172: ...r Only available when protocol is ICMP Any All message types are acceptable Select from list Select message type by name Protocol ID to match Enter the number of message type ICMP Code Select the type...

Страница 173: ...ame that bound of interface Empty means no rule bound IPv6 ACL Display ipv6 ACL name that bound of interface Empty means no rule bound Click Edit button to view the Edit ACL Binding menu Figure 130 AC...

Страница 174: ...to configure settings for general purpose 4 12 1 1 Property To display Property web page click QoS General Property Figure 131 QoS General Property Item Description State Set checkbox to enable disabl...

Страница 175: ...IP Precedence mapping page Port Setting Table Port Port name CoS Port default CoS priority value for the selected ports Trust Port trust state Enabled Traffic will follow trust mode in global setting...

Страница 176: ...port CoS remarking Remarking IP Precedence Set checkbox to enable disable port IP Precedence remarking 4 12 1 2 Queue Scheduling The switch supports eight queues for each interface Queue number 8 is t...

Страница 177: ...e serviced starting with queue_8 the highest priority queue and going to the next lower queue when each queue is completed When the queuing mode is Weighted Round Robin queues are serviced until their...

Страница 178: ...bandwidth 4 12 1 3 CoS Mapping The CoS to Queue table determines the egress queues of the incoming packets based on the 802 1p priority in their VLAN tags For incoming untagged packets the 802 1p prio...

Страница 179: ...or the CoS value Queue to CoS Mapping Queue Queue ID CoS Select CoS value for the queue id 4 12 1 5 IP Precedence Mapping This page allow user to configure IP Precedence to Queue mapping and Queue to...

Страница 180: ...pped 4 12 2 Rate Limit Use the Rate Limit pages to define values that determine how much traffic the switch can receive and send on specific port or queue 4 12 2 1 Ingress Egress Port This page allow...

Страница 181: ...s rate limit is disabled Ingress Rate Port ingress rate limit value if ingress rate state is enabled IP Precedence IP Precedence value which queue is mapped Egress State Port egress rate limit state E...

Страница 182: ...d rate limit value need to be assigned Egress Set checkbox to enable disable egress rate limit If egress rate limit is enabled rate limit value need to be assigned 4 13 Diagnostics Use the Diagnostics...

Страница 183: ...f each destination rule can be individually configured If the logging service is disabled no messages will be sent to these destinations Console Logging State Enable Disable the console logging servic...

Страница 184: ...Description Server Address The IP address of the remote logging server Server Ports The port number of the remote logging server Facility The facility of the logging messages It can be one of the fol...

Страница 185: ...about an event 4 13 2 Mirroring To display Port Mirroring web page click Diagnostics Mirroring Figure 140 Diagnostics Mirroring Item Description Session ID Select mirror session ID State Select mirro...

Страница 186: ...Edit button to view the Edit Mirroring menu Figure 141 Diagnostics Mirroring Edit Mirroring Item Description Session ID Selected mirror session ID State Select mirror session state port base mirror o...

Страница 187: ...source tx ports 4 13 3 Ping For the ping functionality click Diagnostic Ping Figure 142 Diagnostics Ping Item Description Address Type Specify the address type to Hostname or IPv4 Server Address Spec...

Страница 188: ...click Diagnostic Traceroute Figure 143 Diagnostics Traceroute Item Description Address Type Specify the address type to Hostname or IPv4 Server Address Specify the Hostname IPv4 address for the remot...

Страница 189: ...add additional users that are permitted to manage the switch or to change the passwords of existing users To display User Account web page click Management User Account Figure 150 Management User Acc...

Страница 190: ...Description Username User name of the account Password Set password of the account Confirm Password Set the same password of the account as in Password field Privilege Select privilege level for new a...

Страница 191: ...rade Backup Figure 152 Management Firmware Upgrade Backup Item Description Action Firmware operations Upgrade Upgrade firmware from remote host to DUT Backup Backup firmware image from DUT to remote h...

Страница 192: ...st to DUT Backup Backup firmware image from DUT to remote host Method Firmware upgrade backup method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backup firmware Addres...

Страница 193: ...re from remote host to DUT Backup Backup firmware image from DUT to remote host Method Firmware upgrade backup method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backu...

Страница 194: ...ost Method Firmware upgrade backup method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backup firmware Firmware Firmware partition need to backup Image0 Firmware image...

Страница 195: ...Active Image This page allow user to select firmware image on next booting and show firmware information on both flash partitions To display the Active Image web page click Management Firmware Active...

Страница 196: ...image size Created Firmware image created date 4 14 3 Configuration 4 14 3 1 Upgrade Backup This page allow user to upgrade or backup configuration file through HTTP or TFTP server To display firmware...

Страница 197: ...mware HTTP Using WEB browser to upgrade backup firmware Configuration Configuration types Running Configuration Merge to current running configuration file Startup Configuration Replace startup config...

Страница 198: ...method TFTP Using TFTP to upgrade backup firmware HTTP Using WEB browser to upgrade backup firmware Configuration Configuration types Running Configuration Merge to current running configuration file...

Страница 199: ...agement Configuration Upgrade Backup Figure 159 Management Configuration Upgrade Backup Item Description Action Configuration operations Upgrade Upgrade firmware from remote host to DUT Backup Backup...

Страница 200: ...e Backup Configuration Backup configuration file RAM Log Backup log file stored in RAM Flash Log Backup log files store in Flash To display firmware upgrade or backup web page click Management Configu...

Страница 201: ...figuration file RAM Log Backup log file stored in RAM Flash Log Backup log files store in Flash Address Type Specify TFTP server address type Hostname Use domain name as server address IPv4 Use IPv4 a...

Страница 202: ...stination Startup Configuration Copy startup configuration file to destination Backup Configuration Copy backup configuration file to destination Destination File Destination file Startup Configuratio...

Страница 203: ...m length is 30 characters OID Subtree Specify the ASN 1 subtree object identifier OID to be included or excluded from the SNMP view Type Include or exclude the selected MIBs in the view 4 14 4 2 Group...

Страница 204: ...ty level No Security Specify that no packet authentication is performed Authentication Specify that no packet authentication without encryption is performed Authentication and Privacy Specify that no...

Страница 205: ...nt SNMP Group Add Edit Group Item Description Group Specify SNMP group name and the maximum length is 30 characters Version Specify SNMP version SNMPv1 SNMP Version 1 SNMPv2 Community based SNMP Versi...

Страница 206: ...vacy Specify that no packet authentication with encryption is performed View Read Select read view name if Read is checked Write Select write view name if Write is checked Notify Select notify view na...

Страница 207: ...to define the object available to the community View Specify the SNMP view to define the object available to the community Access SNMP access mode Read Only Read only Read Write Read and write Click A...

Страница 208: ...SNMP community specifies group View Specify the SNMP view to define the object available to the community Access SNMP access mode Read Only Read only Read Write Read and write Group Specify the SNMP g...

Страница 209: ...d Authentication Specify that no packet authentication without encryption is performed Authentication and Privacy Specify that no packet authentication with encryption is performed Authentication Meth...

Страница 210: ...tem Description User Specify the SNMP user name on the host that connects to the SNMP agent The max character is 30 characters Group Specify the SNMP group to which the SNMP user belongs Security Leve...

Страница 211: ...r Authentication and Privacy None No authentication required MD5 Specify the HMAC MD5 96 authentication protocol SHA Specify the HMAC SHA 96 authentication protocol Password The authentication passwor...

Страница 212: ...hich is made up of MAC and Enterprise ID The user defined engine ID is range 10 to 64 hexadecimal characters and the hexadecimal number must be divided by 2 Remote Engine ID Table Table Server Address...

Страница 213: ...host address type for Hostname IPv4 IPv6 Server Address Remote host Engine ID Specify Remote SNMP engine ID The engine ID is range10 to 64 hexadecimal characters and the hexadecimal number must be di...

Страница 214: ...display SNMP trap event click Management SNMP Trap Event Figure 172 Management SNMP Trap Event Item Description Authentication Failure SNMP authentication failure trap when community not match or user...

Страница 215: ...e SNMP informs timeout Retry Specify the retry counter of the SNMP informs Version Specify SNMP notification version SNMPv1 SNMP Version 1 notification SNMPv2 SNMP Version 2 notification SNMPv3 SNMP V...

Страница 216: ...acket authentication is performed Authentication Specify that no packet authentication without encryption is performed Authentication and Privacy Specify that no packet authentication with encryption...

Страница 217: ...notification packet security level the security level must less than or equal to the community user name No Security Specify that no packet authentication is performed Authentication Specify that no p...

Страница 218: ...SNMPv3 SNMP Version 3 notification Type Notification Type Trap Send SNMP traps to the host Inform Send SNMP informs to the host version 1 have no inform Community User SNMP community user name for no...

Страница 219: ...configure Timeout Specify the SNMP informs timeout if use default checked the value is 15 else user configure Retry Specify the SNMP informs retry count if use default checked the value is 3 else use...

Страница 220: ...ctets excluding framing bits but including FCS octets received Jabbers Number of received packets that were longer than 1632 octets This number excludes frame bits but includes FCS octets that had eit...

Страница 221: ...aining 256 to 511 bytes that were received Frames of 512 to 1023 Bytes Number of frames containing 512 to 1023 bytes that were received Frames Greater than 1024 Bytes Number of frames containing 1024...

Страница 222: ...DG GS1512HP User Manual 220 Figure 216 Management RMON Statistics 4 14 5 2 History For the RMON history click Management RMON History Figure 217 Management RMON History Item Description...

Страница 223: ...port for the RMON history Interval The number of seconds for each sample Owner The owner name of event 0 31 characters Sample Maximum The maximum number of buckets Sample Current The current number of...

Страница 224: ...ON statistics Bytes Received Number of octets received including bad packets and FCS octets but excluding framing bits Drop Events Number of packets that were dropped Packets Received Number of packet...

Страница 225: ...r excludes frame bits but includes FCS octets that had either a bad FCS Frame Check Sequence with an integral number of octets FCS Error or a bad FCS with a non integral octet Alignment Error number A...

Страница 226: ...ification The notification type for the event and the possible value are None Nothing for notification Event Log Logging the event in the RMON Event Log table Trap Send a SNMP trap Event Log and Trap...

Страница 227: ...tification Event Log Logging the event in the RMON Event Log table Trap Send a SNMP trap Event Log and Trap Logging the event and send the SNMP trap Community Specify the SNMP community when the notif...

Страница 228: ...e time that the event was triggered Description The description for the event 4 14 5 4 Alarm For the RMON Alarm menu click Management RMON Alarm Figure 223 Management RMON Alarm Item Description Port...

Страница 229: ...kets OversizePkts Oversize Packets Number of oversized packets Fragments Fragments Total number of packet fragment Jabbers Jabbers Total number of packet jabber Collisions Collisions Collision Pkts64O...

Страница 230: ...esholds at the end of the sampling interval Delta The selected variable value of the last sample is subtracted from the current value and the difference is compared with the thresholds Interval The nu...

Страница 231: ...er of events received in which the packets were dropped Received Bytes Octets Octets Received Packets Number of packets Broadcast Packets Received Broadcast packets Multicast Packets Received Multicas...

Страница 232: ...ames Greater than 1024 Bytes Number of packets size 1024 to 1518 octets Sampling Specify the sampling type Absolute The selected variable value is compared directly with the thresholds at the end of t...

Страница 233: ...DG GS1512HP User Manual 231 Falling Threshold Specify the threshold for firing falling event Event Specify the index of falling event when alarm was fired...

Страница 234: ...DG GS1512HP User Manual 232...

Результаты поиска

Содержание DG-GS1512HP

Отзывы:

Похожие инструкции для DG-GS1512HP

Бренды по названию

Популярные бренды

Digisol DG-GS1512HP, Руководство пользователя

Результаты поиска

Содержание DG-GS1512HP

Отзывы:

Похожие инструкции для DG-GS1512HP

Бренды по названию

Популярные бренды